CVE-2024-13272

MediumCVSS 6.3

Published: 09/01/2025(UTC)Updated: 21/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

14th percentile - higher than 14% of all known CVEs

Summary

The Paragraphs table module for Drupal has an insufficient granularity of access control vulnerability that allows content spoofing. This affects versions before 1.23.0 and 2.0.0 before 2.0.2.

Risk Assessment

An attacker can spoof table content, leading to user misinformation or data integrity compromise.

Recommendation

Update the Paragraphs table module to version 1.23.0 or later (for 1.x branch) or 2.0.2 (for 2.x branch).

Original NVD description (English source)

Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2.